VDB
ALPINE-CVE-2023-0225
ALPINE-CVE-2023-0225
PUBLISHED
CVSS 4.300000190734863 MEDIUM
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.18 | samba | 4.17.0, 4.8.8-r0, 4.8.7-r0 |
| Alpine:v3.19 | samba | 4.6.0-r0, 4.17.0, 4.8.8-r0 |
| Alpine:v3.23 | samba | 0, 4.17.0, 4.8.8-r0 |
| Alpine:v3.21 | samba | 4.11.6-r0, 3.2.10-r0, 3.3.7-r3 |
| Alpine:v3.24 | samba | 4.17.0 |
| Alpine:v3.20 | samba | 4.8.5-r0, 4.8.4-r1, 4.8.4-r0 |
| Alpine:v3.22 | samba | 4.17.0, 3.2.11-r0, 3.2.8-r0 |
Timeline
- Apr 3, 2023 CVE Published
- Apr 30, 2026 Distribution Patch
- Jul 8, 2026 CVE Updated